Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5d1494a5-150e-346b-ba92-a26c8611f04f.roa
File:                     5d1494a5-150e-346b-ba92-a26c8611f04f.roa (raw, json)
Hash identifier:          Drbr28oqVaZ4/GHCqQpNMwxzsWbKMsB4CJimRQLDbGQ=
Subject key identifier:   0C:D2:24:5E:3F:AB:EB:CD:2D:DC:0D:39:9E:84:62:76:C6:0A:CD:66
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848F008881A2BE1C7C2FE40C100
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5d1494a5-150e-346b-ba92-a26c8611f04f.roa
Signing time:             Wed 19 Feb 2025 19:38:05 +0000
ROA not before:           Wed 19 Feb 2025 19:38:05 +0000
ROA not after:            Tue 20 May 2025 18:38:05 +0000
asID:                     44477
IP address blocks:        50.114.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f0:08:88:1a:2b:e1:c7:c2:fe:40:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 19 19:38:05 2025 GMT
            Not After : May 20 18:38:05 2025 GMT
        Subject: CN=27cf9197-0940-4198-a2f9-a44cdb2dbb98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f7:85:ac:fc:f0:4a:c5:e5:7a:26:74:05:b7:
                    81:92:12:01:8d:52:f6:f9:b0:a1:85:ee:8c:29:86:
                    74:9c:3a:93:51:9b:29:fc:3e:44:0d:ce:33:87:6a:
                    cb:cd:c1:36:a3:e0:85:fa:d9:19:71:41:e3:a2:a9:
                    0b:5a:b9:05:a6:80:02:91:40:a8:12:5e:c9:fe:c9:
                    19:43:a2:e7:aa:69:ee:9c:48:56:64:41:dc:89:c2:
                    53:c3:8c:e4:19:a6:55:bf:f1:cc:15:df:ed:c5:de:
                    79:b6:34:4c:07:92:72:f2:67:3d:8e:ce:dd:1d:de:
                    50:b2:f9:58:06:bb:75:a7:94:aa:23:8b:3c:1c:ee:
                    f7:e4:70:7b:d6:76:5b:27:1b:38:a4:1d:9d:ce:1a:
                    97:17:ca:11:b1:0d:c6:e0:ab:c2:6f:aa:cc:e7:76:
                    9c:0b:d7:0e:9e:b7:e7:32:49:24:a1:0b:77:d2:ab:
                    3c:77:9b:7b:47:a5:67:c6:28:e6:34:4c:d6:51:66:
                    27:38:5f:2f:26:14:85:f1:18:32:78:66:99:a8:15:
                    0a:17:d5:7a:45:26:5a:92:33:14:62:a6:25:0f:c0:
                    93:05:6a:b2:6e:75:87:71:14:b9:d0:0a:24:a5:da:
                    10:de:cf:d4:1d:c3:c5:1a:d4:0d:20:0e:51:16:71:
                    5e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D2:24:5E:3F:AB:EB:CD:2D:DC:0D:39:9E:84:62:76:C6:0A:CD:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5d1494a5-150e-346b-ba92-a26c8611f04f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:9e:a6:37:35:bf:e3:d7:ed:35:9c:29:ad:28:b6:a1:40:dd:
         cd:8a:8f:89:4e:35:a3:03:2c:bf:ed:17:37:a0:d0:3f:d0:5b:
         89:eb:74:c4:66:2d:7e:aa:27:b7:d9:72:66:25:95:5b:1e:69:
         c8:a1:cf:c7:e1:96:34:59:f3:60:67:67:69:7c:30:df:a7:8b:
         1b:44:30:c8:4e:10:d2:58:e3:12:6b:9b:55:d8:64:a4:45:bb:
         8d:d0:7b:24:b8:d9:0b:ca:03:52:30:6e:ba:d9:cd:5d:be:07:
         17:96:55:f9:1e:06:ce:d1:97:40:b0:94:8b:c2:42:4b:b7:fc:
         87:3b:86:8f:19:e4:47:e2:1e:5a:54:9c:33:e4:e9:5e:82:de:
         87:47:45:35:90:7c:a3:24:fc:c4:c6:9f:50:c2:70:6a:15:5c:
         b5:b3:63:ab:f7:6e:93:08:a4:a1:72:8d:f7:5e:a9:3f:52:42:
         f3:31:e3:87:af:ae:0f:50:dd:55:5c:04:53:db:25:c1:19:9c:
         93:b7:5d:d1:bb:69:81:5a:d9:9b:2c:cd:49:9a:ea:88:a3:e6:
         24:07:71:1f:61:fe:94:ed:4f:ce:a3:6c:bc:d5:ee:d0:31:e1:
         ca:5c:e9:c3:59:40:96:95:86:ef:83:9a:ed:dc:62:95:17:3f:
         56:fe:66:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:23:22 2025 by rpki-client